Open the PT file called PT SWITCH CS sem 1 21 initial
Objective: As a senior network engineer at GSS (Global Switching Services), you are
currently working on configuring networking devices at one of the GSS branches.
Note: Unless otherwise instructed you will configure the Packet Tracer devices and write
the commands on the Case Study answer sheet.
++++++++++++++
Task 1 Layer 2 Port Security and Switch Port Analyzer (SPAN)
Use the main topology NOT any of the topologies inside a cloud
Configure so that…
A. PC6 is connected to a switch port (Sw1, port 9) that allows 5 secure mac addresses.
a. Any security violation will cause invalid frames to be dropped but the port
does not shut down. A log message is generated.
b. The port security aging timer is to be set at 2 hours
B. for the Backup_Server, the switchport that it connects to (Sw2, port 10) must have a
static port-security configuration
C. Local SPAN on Sw2 will monitor only ping and web (normal and secure browsing)
frames coming in or going out of the port connected to the Backup_Server (port 10).
Verify that these frames are captured by the SPAN device
Save the configs on each device that you configured so far for Tasks 1,A,B,C
Write the commands, but don’t configure any devices…….
RSPAN commands on Sw1 and on Sw2 so that any frames coming in on Sw1 port 18
will use vlan 500 to be sent across the trunk link to be captured by the sniffer on Sw2
(port 2)
Save your configuration commands on your SWITCH CS sem 2 2021 answer sheet <your name>
Email this answer sheet to your instructor for feedback.
If the configurations don’t seem to be working, on the same email, attach the packet tracer file that has these
configurations applied Do NOT send a text file with show run
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Task 2 InterVLAN Routing, IVR
Use the main topology NOT any of the topologies inside a cloud
A. Configure Vargas router with subinterfaces for VLANs 10 and 20.
Vargas’ address for vlan 10 is the first host address in the subnet.
Vargas’ address for vlan 20 is the last host address in the subnet
B. Configure the MLS, called DLS1, with interfaces for VLANs 5 and 20.
DLS1’s address for vlan 5 is the first address in the subnet and for vlan 20 is the 2nd
last address in the subnet
Save the configs on each device that you configured in this Task,
Save your configuration commands on your SWITCH CS sem 2 2021 answer sheet <your name>
Email this answer sheet to your instructor for feedback
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Task 3 STP
Use the main topology NOT any of the topologies inside a cloud
A. On any switch that has connected PCs, configure so if a connected PC reboots, the
connected port forwards quickly
B. Configure so that all switches respond quickly if a switch RP, root port, fails
C. DLS1 is to be primary RB ,Root Bridge for vlan 5 and secondary RB for vlan 1.
D. Configure so that DLS1 has all ports Designated for vlan 20.
E. Sw1 is RB for vlans 1 and 10. Use only one command to achieve this
F. For the two links between DLS1 and Sw2, port fa0/24 is to be the forwarding link for
vlan 5. Don’t modify port cost to do this task
G. For the two links between DLS1 and Sw1 (Gi0/1 and gi0/2), on DLS1 port Gi0/2
should be the alternate blocking port. Configure so that Gi0/2 becomes the
forwarding port and Gi01 is the blocking port. Increase a port cost to do this task
Note: Sometimes PT does not do this properly. Write the commands that should
work.
H. There are plans to connect a new switch to Sw2 port fa0/2.
Ensure that the network design is protected so that this new switch does not become
root bridge. Configure this only on Sw2 port fa0/2
(Don’t connect a new switch to fa0/2, please)
I. Until this new switch is connected, protect Sw2 fa0/2 against any switch being
connected to that port.
Save the configs on each device that you configured in this Task,
Save your configuration commands on your SWITCH CS sem 2 2021 answer sheet <your name>
Email this answer sheet to your instructor for feedback
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Task 4 Etherchannel
Use the main topology NOT any of the topologies inside a cloud
A. Configure a layer 3 etherchannel between Sw3 and Sw4. This layer 3 channel belongs to
the network [Link]/30
B On Sw3 and Sw4 enable OSPF on this network [Link]/24 but don’t use any ospf
network command (use a different OSPF technique) You may need to fast forward time to see
an ospf neighbor log message
C Load balance using source ip address
Save the configs on each device that you configured in this Task,
Save your configuration commands on your SWITCH CS sem 2 2021 answer sheet <your name>
Email this answer sheet to your instructor for feedback
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Task 5 Dot1x authentication
Use the main topology NOT any of the topologies inside a cloud
A. On Sw1, any user on PC6 needs to be authenticated using dot1x and AAA on the
Backup_Server.
B. The username is Leo and the password is cisco4
Save the configs on each device that you configured in this Task,
Save your configuration commands on your SWITCH CS sem 2 2021 answer sheet <your name>
Email this answer sheet to your instructor for feedback
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Task 6 DHCP
Use the topology inside the cluster cloud labelled Task 6 DHCP
Task 6a ipv4 DHCP on an MLS
MLS_DHCP is already configured with a DHCP pool for VLAN 20 devices
Do further configuration on MLS_DHCP so that dhcp works for this VLAN 20 pool
Test this DHCP service on the VLAN 20 PCs
+++++++++++
Task 6b ipv4 DHCP on a server
Carefully check the configuration of DHCP on the Internal_Server
*The DHCP pool is for local clients on the same network
*Exclude the first 30 IP addresses in the subnet.
*Allow 15 dynamic addresses.
* Cisco VoIP phones need the address of a server at [Link].
*Wireless access points need the address of their LAN Controller at [Link]
+++++++++++
Task 6c ipv6 DHCP stateless configuration
Configure Router_DHCP so that the PCs connected to fa0/0 on the router will obtain
ipv6 addresses using stateless dhcp
The PCs should receive the dns address of 2001::254 and the domain name of
[Link]
Configure so that the appropriate flags are definitely set to the correct values
Save the configs on each device that you configured in this Task,
+++++++++++
Task 6d ipv6 DHCP stateful configuration
The router called R-DHCP acts as a stateful IPv6 server using the following parameters
A. Configure the R-DHCP router with an ipv6 dhcp pool to provide stateful ipv6 dhcp
services to clients on its fa0/0 LAN.
a. The pool name is to be R-LAN
B. Use the address prefix 2001:172:1::/64
C. The valid lifetime is 18 hours and the preferred lifetime is 12 hours
D. The dns server address will be 2001:172:1:0::254
E. The domain name will be [Link]
F. Do whatever other configurations are usually needed for Stateful configuration to
work
Save your configuration commands on your SWITCH CS sem 2 2021 answer sheet <your name>
Email this answer sheet to your instructor for feedback
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Task 7 is on the next page
Task 7 HSRP
Use the topology inside the cluster cloud labelled Task 7 HSRP
A. MLS-hsrp and R-hsrp are in a HSRP group 20, for vlan 20 devices
For the MLS called MLS-hsrp, the SVI is the HSRP interface
B. The virtual ip address is [Link] (The 2nd octet is 16, not 1)
C. Configure so that R-hsrp is the Active HSRP device Be aware that interface tracking
has a default decrement of 10 on Packet Tracer.
D. Ensure that R-hsrp tracks its S0/0 link to R2-hsrp. If this link fails, MLS-hsrp should
become active
E. Improve failover time by changing the hsrp timers on R-hsrp to Hello 1 second and
hold-time 4 seconds
F. Configure MLS-hsrp with OSPF routing so that any active interface is enabled for
OSPF in area 0. Use a single OSPF network command to achieve this.
G. When all interfaces are enabled and HSRP is working normally, do extra
configuration on MLS-hsrp so that packets from the PCs to the server use the serial
link between R-hsrp and R2-hsrp.
Test using continuous pings from PC22 and PC23 to the server.
If the R-hsrp interface (fa0/1) connected to the PCs fails, failover should be
successful
If the R-hsrp interface (s0/0) connected to R2-hsrp fails, MLS-hsrp should be active.
Use a trace to the server to verify
Save the configs on each device that you configured in this Task,
Save your configuration commands on your SWITCH CS answer sheet <your name>
Email this answer sheet to your instructor for feedback
+++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
END OF THE CASE STUDY